Games not on GamStop are the games at offshore operators that hold no Gambling Commission licence. GamStop Online blocks play with every GB-licensed company, so a site outside that licence never receives the check. It is not a loophole; it is an unregulated market the Commission spends real money chasing.
GamStop is the sort of name people mistype, and where the scheme is first mentioned it is worth saying plainly that it is often typed "gamestop" — the word "game" suggests itself. The scheme itself has been available to consumers since April 2018 and now blocks play with any operator licensed in Great Britain. That is the whole of its reach, and it is narrower than most people assume. It binds the licensed market and nothing else. A site holding a Curaçao, Anjouan or Kahnawake licence is not a participant, so a registration there simply never meets it.
What follows is what the regulator does about unlicensed sites, what the numbers say about how many people use them, and how the terms of an offshore site differ from the terms a British licence imposes. None of this is a recommendation. It is a description of a market that exists, is shrinking at the margin and is policed harder than it was five years ago.
Table of Contents9
- Which Games Sit Outside the Scheme
- What the Regulator Does About It
- Licensed Sites Set the Standard
- The Licence Is the Whole Argument
- Five Signs an Operator Can Be Trusted
- How to Judge an Offshore Operator in Six Steps
- Not a Shortcut Round an Exclusion
- Common Questions About Sites Outside the Scheme
- The Gap Is Real, Narrow and Getting Narrower
Which Games Sit Outside the Scheme
The brief for any honest answer is the licence, not the game. There is no such thing as a rogue version of roulette — the same software appears on licensed and unlicensed sites alike, often from the same studio. What differs is who is allowed to offer it to a British customer. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Commission states plainly that this includes an operator licensed elsewhere. On summary conviction the offence carries up to 51 weeks' imprisonment, a fine at level 5, or both — six months in Scotland.
Offshore regulators do not pretend otherwise. Anjouan Gaming said in a statement in June 2026 that an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world", and that no licensing authority can exempt an operator from local law where local authorisation is required. That is a regulator telling the truth about its own limits.
Casino Games Not on GamStop
Casino games are where the gap is widest, because the compliance burden on a UK licence is heaviest for exactly this product. Slots carry a £5 maximum stake per game cycle since 9 April 2025, and £2 for adults aged 18 to 24 since 21 May 2025; no offshore operator applies either. Remote casino gross gambling yield was £5.0 billion in April 2024 to March 2025, £4.2 billion of it from slots — a large enough prize that the Commission's own 2026 risk assessment still rates the sector high risk for money laundering, unchanged from the year before.
Slot Games Not on GamStop
Slots are the product the Commission warns about most often. Its January 2025 industry warning notice concerned licensed operators' casino games appearing on unlicensed websites reachable by British consumers, and noted that such sites often target people who have self-excluded and may have weak social responsibility and anti-money-laundering controls. That is the finding worth carrying: the gap is not neutral. It is actively worked.
Betting, Bingo and Lottery Sites
Betting, bingo and lottery products follow the same rule and a different rhythm. Bingo and poker sit on shared networks, so an offshore room may be thin on liquidity exactly where a licensed one is not. The single constant across all of them is that no British licence means no GamStop check, no requirement to participate in the national scheme, and no access to the UK's dispute-resolution route.
What the Regulator Does About It
The Commission's Illegal Markets team is the answer to the fair question of whether anyone is doing anything. Since April 2024 it has issued 3,211 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals. Over the same period it referred 447,778 Bing and Google URLs and secured 287,961 removals. I have some sympathy for the sceptics here, because removing a URL does not remove a site; the Commission says so itself. It reports that registrar blocks and website suspensions produced the largest average fall in engagement, 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. Measured across 160 illegal gambling websites, the average decrease in engagement after disruption was 32 per cent.
The trend is steep. Website referrals to search engines rose from 124 in July to September 2024 to 321 in April to June 2025, then to 366 in April to June 2026 (147,721 URLs) and 1,835 in July to September 2026 (7,677,211 URLs), when 546 cease and desist notices went out. Prosecutions, by contrast, barely register: across April 2025 to March 2026 every quarter recorded 0 or 1 prosecutions commenced, one in total.
A Checkable Benchmark
For scale, the Commission's analysis published on 5 November 2026, covering April 2025 to April 2026, is the number to hold on to. Across the whole adult population including non-gamblers, 0.6 per cent of respondents had engaged with an illegal gambling website in the past four weeks and a further 0.4 per cent in the past 12 months, while 94.4 per cent showed no indication of using one. Among those who had gambled online in the past four weeks, 2.5 per cent had engaged with an illegal site, plus 1.5 per cent in the past year. Its illegal gambling dashboard recorded 586 illegal gambling websites accessible to British consumers in September 2026, and 311 illegal sites had disruption action taken against them in Quarter 2 of 2026 to 2027 — 38 per cent more than the previous quarter, with 77 per cent of disrupted websites showing a reduction in estimated traffic.
Two things follow. First, the market is small in share and large in absolute heads — 2.5 per cent of online gamblers is not a rounding error. Second, disruption works partially and slowly, which is a different claim from the one usually made in either direction.
Licensed Sites Set the Standard
Every comparison in this article runs one way: the British licence is the benchmark sentence by sentence, and offshore terms are read against it. That is not patriotism, it is measurement. A UK licence comes with a known set of obligations — a withdrawal that must not demand fresh documents the operator could reasonably have asked for earlier (Licence Condition 17.1.1), terms that must be fair under the Consumer Rights Act 2015 (Licence Condition 7.1.1), a prohibition on any maximum limit on withdrawing a deposit balance, and a rule that an account holding a self-exclusion must be closed with funds returned. None of those clauses binds an operator with no British licence.
The good offshore operators are, to be fair, not identical to the bad ones. Anjouan's published standards require segregated player funds, random number generators certified by an approved independent testing facility, and AML and age-verification controls. Kahnawake has regulated interactive gaming since 1999, requires a licensee's relationship with players to be contractual and free of unfair terms, and employs a full-time dispute resolution officer. Curaçao rebuilt its regime under the National Ordinance on Games of Chance, in force since 24 December 2024, replacing the old master-licence and sub-licence model with direct licensing by the Curaçao Gaming Authority.
Then there is the argument that costs British players money, and it is the one thing on this topic I will call hollow: that an offshore site clears a payout faster because it is not waiting on a licensed operator's identity checks. The Commission's own figures, covering June to September 2024, record 44.2 million withdrawals by customers of large online operators, of which 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. Earlier data from some of the largest firms showed around 99 per cent of withdrawal requests approved, processed and fulfilled within 24 to 48 hours. A comfortably comparable share of British players agreed that "it is quick and easy to withdraw and collect my winnings" — 49 per cent in research published in July 2026, against 18 per cent who disagreed. The speed story is largely a story about which operator you picked, not which regulator licensed it.
Terms That Build In Delay
Where offshore terms differ most is in what happens after the win. A wagering requirement is a delay by design, and the two markets cap it very differently.
| Method or term | British licence (LCCP) | Typical offshore departure |
|---|---|---|
| Wagering requirement on bonus funds | Capped at 10× since 19 January 2026 (SR Code 5.1.1) | Named operators publish 25× (Ignition); trade comparisons cite 35×–50× welcome and 40×–60× no-deposit offers |
| Mixed-product promotions | Banned since 19 January 2026 | Common; products routinely combined in one incentive |
| Maximum withdrawal cap | Prohibited on a deposit balance | A named operator limits bonus winnings to 300% of the credited bonus |
| Display of deposit and bonus balances | Must always be displayed separately | Not standard |
| Withdrawing while a bonus is active | Must be allowed | Frequently restricted |
| Maximum bet while wagering | Not a licence term | ₹400/€5/$5 (VIP ₹800/€10/$10) at one operator; 20% of deposit at another |
| Dispute route | Free ADR, complaint must be resolved within eight weeks | Anjouan requires an approved ADR provider named in the terms, with 30 days to resolve |
The same numbers appear above and here: 10× is the UK ceiling, and 25× is a real published offshore figure at a real named operator, not a scare number. Someone on a five-year exclusion, meanwhile, is on it for the full term and afterwards until they contact GamStop to have it removed; an offshore account is not a route round that and should never be described as one.
The Licence Is the Whole Argument
If one thing decides what a game is worth playing, it is the licence behind it, because the licence is what carries the enforcement. British licensing imposes the obligations in the table above, checks the customer base of every operator against GamStop at least every 24 hours as a condition introduced in April 2020, and provides a complaints route with an eight-week clock. A Curaçao licence now means something quite specific: since 24 December 2024 the Curaçao Gaming Authority licenses directly, the legacy "orange" sub-licence certificates ended on 15 October 2025, and a historic /JAZ number is not proof of a current licence. Curaçao's application fee for a B2C licence is a one-time non-refundable EUR 4,592, with a total annual B2C fee of EUR 47,450 payable by 15 January. Anjouan charges EUR 17,828 for B2C issuance and the same again annually. Kahnawake's CPA application fee rises from USD 35,000 to USD 40,000 on 1 January 2027.
Fill in those numbers and the shape of each regime appears. A British licence is not merely dearer; it is the only one that comes with a regulator able and willing to act against the operator itself. Costa Rica, by contrast, has no comprehensive licensing regime at all — its Legislative Assembly rejected Bill No. 25,057 in early 2026 — and the "data processing license" sometimes cited in the trade is not a licence in the strict legal sense.
The warning signs are almost always administrative rather than dramatic. A seal that will not redirect to the Curaçao verification page at cert.cga.cw, or one whose certificate displays a different domain, is a site displaying another operator's paperwork and should be treated as unauthorised. A historic /JAZ number presented as a live licence is the same trick in older clothing. Anjouan certificates carry a licence number and a QR code linking to a public register, and the authority itself says certificates that cannot be verified there should not be relied on. And before any of that, the Commission's advice is simple: check the public register and confirm the site's activities and domain names match.
Five Signs an Operator Can Be Trusted
Trust here is not a feeling about a website. It is a set of documents that either exist or do not, and each of them takes a few minutes.
Check the Licence Against the Public Register
A licence claim is verifiable, and the verification takes about a minute. Look the operator up on the Gambling Commission's public register and check that the company, its activities and the specific domain name all appear. If a site holds a Curaçao licence, the Certificate of Operation Seal must redirect to cert.cga.cw, and the certificate shown must name the domain currently in the address bar. A mismatch means the site is wearing somebody else's paperwork.
Read the Terms on Withdrawals Before Depositing
The single most useful check is the withdrawal clause, and it is the least read. Look for a maximum cashout, a minimum withdrawal, a processing fee, a cap on how many withdrawal requests can be pending at once, and a requirement to send documents only at payout. A named operator was penalised £900,000 in a settlement announced on 21 October 2026 for, among other failures, letting customers request only one withdrawal at a time until the previous one was authorised — a term the Commission found unfair.
Confirm the Customer-Funds Rating
Money in an account is not money in a bank account. British operators must declare one of three customer-funds protection ratings — "not protected", "medium protection" or "high protection" — in writing, and must make a "not protected" operator remind the customer every six months that their funds are not protected on insolvency. A site that will not state its rating in writing has told you something.
Find the Complaints Route and the Regulator Behind It
Every operator has a complaints page; the question is where it ends. A British licensee must offer free access to an approved alternative dispute resolution provider if a complaint is not resolved within eight weeks, and the provider's decision is published in aggregate — IBAS reports 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. An offshore site's route ends with a named ADR provider in its terms, or with nothing at all. If the terms mention no provider, assume there is none.
Test the Deposit Limit Before You Need It
The ability to set a limit before the first deposit, in a free-text box, is a British licence requirement since 31 October 2025, and the customer must take an action to decline setting one. Try that route on any site and watch how the process behaves. If limits are buried behind live chat, applied only in fixed amounts, or reviewable only by asking someone, the operator has told you how it thinks about control.
How to Judge an Offshore Operator in Six Steps
None of these steps involves a deposit, and none crosses a line — they are document checks and registry lookups, the same work a compliance officer does in the first ten minutes.
- Confirm the regulator and the licence number. Read the footer, note the claimed regulator and number, then verify it against that authority's own register — the Commission's public register, the Curaçao register, Anjouan's public register by QR code, or Kahnawake's Certificate of Good Standing tool. Reason: a claim you have verified is worth more than a claim you have read.
- Match the domain to the certificate. The named domain must be the one in the address bar. Reason: certificates get copied between operators, and a Curaçao certificate naming a different domain signals an unauthorised site.
- Search the terms for the word "maximum". Maximum cashout, maximum bet, maximum withdrawal, maximum win from free spins. Reason: this is where delay and confiscation hide, and it is the clause that decides what a win is actually worth.
- Compute the wagering requirement in pounds. A 25× requirement on a £100 bonus is £2,500 of play before anything is withdrawable; on a £100 deposit plus £100 bonus at 40×, it is £8,000. Reason: the multiple means nothing until it is a number the player can picture.
- Check how the site treats limits and exclusion. Whether limits can be set before depositing, whether there is a closed-account route, and what the terms say happens to a balance when an account closes. Reason: an operator's controls are a better guide to its conduct than its marketing copy.
- Write down the complaints route before playing. Provider name, contact page, and the deadline in the terms for escalating. Reason: the moment a complaint exists is the moment nobody reads the small print carefully, and a route you have already found is a route you will actually use.
If the first three steps can't be completed from public sources, the honest conclusion is that the operator has not given anyone enough to make a judgement on — and that absence is itself the answer.
Not a Shortcut Round an Exclusion
It is worth being blunt about the one thing offshore marketing never says plainly, because the Commission says it for them. That is not a coincidence: the Commission's January 2025 warning notice noted that unlicensed sites often target customers who have self-excluded via GamStop. A self-exclusion registered with GamStop Online holds for its full term and stays in place after the chosen period ends until the person contacts GamStop to have it removed. Registrations cannot be removed early, and the scheme's own annual report for 2025 devotes a section to its refusal to do so.
The figures are worth knowing too. GamStop recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at the end of that year. Registrations ran 16 per cent up year on year in the first half of 2026, and May 2026 set a monthly record of 12,236 sign-ups. As of July 2026 the register held 614,738 people, more than half of whom had chosen the maximum five-year term. For support rather than a block, the National Gambling Helpline is operated by GamCare on 0808 8020 133, free, 24 hours a day, every day of the year.
Common Questions About Sites Outside the Scheme
What gambling sites are not on GamStop?
Any operator without a Gambling Commission licence is outside the scheme, because participation is a licence condition rather than a choice. That means sites licensed in Curaçao, Anjouan or Kahnawake, and sites licensed nowhere at all — there is no central list of the latter, which is precisely why the check has to run the other way, from the licence claim to the regulator's own register.
Are games not on GamStop UK legal to play?
Providing gambling facilities to British consumers without a Commission licence is an offence by the operator under section 33 of the Gambling Act 2005, and the Commission states this includes operators licensed in another jurisdiction. The Act's general gambling offences attach to those who provide facilities, not to adult consumers. That asymmetry is the whole design, but it does not create protection: no British licence means no British safeguards, no free ADR route and no GamStop check.
Do offshore sites pay out faster than British ones?
Usually not, and the claim rarely survives contact with the numbers. The Commission's data for June to September 2024 records 44.2 million withdrawals by customers of large licensed operators, with 96.3 per cent clearing automatically and 99.9 per cent within 24 hours. Offshore terms often add a wagering requirement of 25× or more and a maximum cashout before a bonus win is withdrawable at all — a delay built into the paperwork rather than the payment rail.
Which UK rules stop applying offshore?
The visible ones first: the £5 maximum stake per game cycle on online slots for all adults, and £2 for 18- to 24-year-olds, apply only under a British licence. So do the 10× cap on bonus wagering requirements in force since 19 January 2026, the ban on mixed-product promotions, the credit-card ban since 14 April 2020, the requirement to prompt a financial limit before a first deposit, and financial vulnerability checks triggered at £150 of net deposits over 30 days.
How can anyone check a licence claim?
Start with the regulator's own register rather than the site's badge. The Commission advises checking that the business holds a licence and that the register matches the site's activities and domain names. For Curaçao, a Certificate of Operation Seal must redirect to cert.cga.cw with a matching domain; for Anjouan, a licence number and QR code must resolve on the public register. Verification usually takes a minute.
What is the first sign of trouble at an offshore operator?
Documents requested for the first time at the withdrawal stage. The Commission reports that over a quarter of complaints reaching its Contact Centre concern identity verification, a concern raised when documents are demanded only on attempting to withdraw, and it has told operators that a customer's withdrawal request must not trigger a requirement for information the licensee could reasonably have requested earlier. Under a British licence that is a breach. Offshore, it is simply the terms.
The Gap Is Real, Narrow and Getting Narrower
Treat the licence as the whole of the argument: games not on GamStop are games offered by operators outside a regime that costs real money to join, and the absence of that cost is passed on as a term somewhere — usually in the wagering clause rather than the payment speed. British licensing remains the benchmark, several offshore regimes are genuinely tightening, and the Commission is disrupting more sites each quarter than the year before. Then read the size of the market for yourself: 0.6 per cent of all adults had engaged with an illegal gambling website in the four weeks before the Commission's survey, and a further 0.4 per cent in the past twelve months.
As of 12.11.2026, the number that best describes the whole topic is 32 per cent — the average fall in engagement the Commission measured across 160 disrupted illegal gambling websites. Not shut down. Slowed.